PT-2011-5150

Name of the Vulnerable Software and Affected Versions Schneider Electric Quantum Ethernet Module on the NOE 771 device affected versions not specified Description The issue allows remote attackers to install arbitrary firmware updates. This is achieved by exploiting the modbus 125 handler functio...

CVE-2011-4861: Undefined Security Weakness

The modbus125handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device aka the Quantum 140NOE771 module allows remote attackers to install arbitrary firmware updates via a MODBUS 125 function code to TCP port 502...

Multiple Vulnerabilities Haunt Long List of PLC Modules

A long list of industrial-control modules manufactured by Schneider Electric and used to control operations at various industrial facilities contain multiple weaknesses and vulnerabilities that could allow an attacker to modify the firmware, login remotely and run arbitrary code on the vulnerable...

Modbus Version Scanner

This module detects the Modbus service, tested on a SAIA PCD1.M2 system. Modbus is a clear text protocol used in common SCADA systems, developed originally as a serial-line RS232 async protocol, and later transformed to IP, which is called ModbusTCP. Module Options msf use...

Nmap NSE net: modbus-discover

Enumerates SCADA Modbus slave ids sids and collects their device information. Modbus is one of the popular SCADA protocols. This script does Modbus device information disclosure. It tries to find legal sids slave ids of Modbus devices and to get additional information about the vendor and firmwar...

Nmap NSE net: modbus-discover

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Automated Solutions Modbus/TCP OPC Server Detection

Binary data scadaappautomatedasmbtcpopcdetect.nbin...

Modbus/TCP Master OPC Server MODBUS Protocol Response Packet Remote Overflow

Binary data scadaasmbtcpopc302.nbin...

CVE-2010-4733

WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a...

Default credentials

WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a...

Design/Logic Flaw

cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to execute arbitrary code by using a config.html 2.conf action to...

CVE-2010-4732

CVE-2010-4732 affects WebSCADA WS100/WS200, Easy Connect EC150, Modbus RTU-TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100/NB200 platforms. The vulnerability is in cgi-bin/read.cgi and lets remote authenticated administrators replace the logo page GIF via a co...

CVE-2010-4733

CVE-2010-4733 and related entries describe default-credential and remote-authenticated risks affecting Intellicom NetBiter NetSCADA WebSCADA components (WS100/WS200, EC150, MB100, SS100 on NB100/NB200). The root issue cited is default usernames/passwords allowing superadmin access via the web int...

CVE-2010-4730

Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a...

CVE-2010-4730

CVE-2010-4730, CVE-2010-4731, CVE-2010-4732, CVE-2010-4733 describe security issues in WebSCADA NetBiter NB100/NB200 platforms (WS100/WS200, EC150, MB100, SS100). All relate to the same product family and involve cgi-bin/read.cgi vulnerabilities that allow traversal or manipulation of files when ...

CVE-2010-4731

Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a...

PT-2011-1683

Name of the Vulnerable Software and Affected Versions WebSCADA WS100 and WS200 versions affected versions not specified Easy Connect EC150 versions affected versions not specified Modbus RTU - TCP Gateway MB100 versions affected versions not specified Serial Ethernet Server SS100 versions affecte...

PT-2011-1681

Name of the Vulnerable Software and Affected Versions WebSCADA WS100 and WS200 versions affected versions not specified Easy Connect EC150 versions affected versions not specified Modbus RTU - TCP Gateway MB100 versions affected versions not specified Serial Ethernet Server SS100 versions affecte...

CVE-2010-4732: Improper Control of Generation of Code

cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to execute arbitrary code by using a config.html 2.conf action to...

PT-2011-1682

Name of the Vulnerable Software and Affected Versions WebSCADA WS100 and WS200 versions affected versions not specified Easy Connect EC150 versions affected versions not specified Modbus RTU - TCP Gateway MB100 versions affected versions not specified Serial Ethernet Server SS100 versions affecte...